Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1vfxbTNE6JduBgwUCtz_b4KuMgk.roa
File: 1vfxbTNE6JduBgwUCtz_b4KuMgk.roa (raw, json)
Hash identifier: jzuwcTC+bdOvc+xFwNWhBKumhocpsZlINz0asa7bs1Q=
Subject key identifier: D6:F7:F1:6D:33:44:E8:97:6E:06:0C:14:0A:DC:FF:6F:82:AE:32:09
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B54F52DD20A0C8C40186624E5CF14BAC5
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1vfxbTNE6JduBgwUCtz_b4KuMgk.roa
Signing time: Sun 22 Oct 2023 01:17:15 +0000
ROA not before: Sun 22 Oct 2023 01:17:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:54:f5:2d:d2:0a:0c:8c:40:18:66:24:e5:cf:14:ba:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 22 01:17:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6f7f16d3344e8976e060c140adcff6f82ae3209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b9:af:b0:48:e5:c1:3a:ba:f0:d7:6f:6b:14:
3b:61:57:e6:38:1f:05:f2:50:05:6c:f0:82:e9:34:
e3:87:30:dd:d9:12:2d:12:3c:c9:6e:5f:0d:5f:29:
1f:5f:19:eb:af:f2:c8:f3:45:74:52:1f:51:f5:ea:
e8:b4:6d:05:e0:13:03:05:ef:21:8e:60:70:c2:8b:
8e:15:c4:dc:ea:49:ba:e6:41:f9:02:79:fe:48:5d:
04:16:5c:bc:09:b2:9f:f1:56:27:2a:58:44:c7:ae:
c6:1b:67:a6:78:6a:d6:72:05:c3:6f:93:0a:d6:83:
38:22:2b:68:18:04:15:c4:26:5b:28:85:4a:9c:ef:
88:9e:14:be:c3:23:ab:5b:82:fb:6d:1b:00:31:09:
c8:78:f8:cc:65:96:75:13:0e:2b:3e:d5:27:52:26:
cc:05:82:ff:87:20:26:df:5a:df:3e:4d:07:e2:54:
52:8d:c8:8d:a2:4e:40:04:5e:ff:a2:89:4c:c0:98:
b1:50:9f:79:dd:95:56:27:b7:46:8b:39:8e:56:54:
ab:3a:82:37:28:df:1b:5e:d4:e1:2a:d9:a9:12:ac:
20:8f:85:1b:28:dd:4d:97:4d:5a:ca:a5:80:0c:e4:
ac:30:93:fe:21:55:aa:54:01:89:75:95:19:fb:bb:
12:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F7:F1:6D:33:44:E8:97:6E:06:0C:14:0A:DC:FF:6F:82:AE:32:09
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1vfxbTNE6JduBgwUCtz_b4KuMgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:5d:58:7a:63:22:d3:79:96:25:33:95:40:85:9e:b5:c3:fb:
54:8a:24:49:00:bf:a8:28:c8:eb:a8:27:0d:8b:50:dc:d7:01:
11:40:2c:55:d6:1e:60:59:6c:75:68:03:1c:44:0f:bd:7b:ed:
9a:17:5e:d0:4f:00:32:8c:f9:16:12:c0:c3:e1:18:31:33:55:
65:42:57:83:1e:26:30:0c:fe:45:fd:c1:2d:61:9b:b5:56:56:
ea:0d:9b:61:8e:12:60:07:3c:75:6c:f2:17:6f:0b:65:72:4b:
15:d4:03:ff:24:f6:73:46:65:ad:17:bc:20:94:f7:d8:ca:07:
cf:6c:c0:01:30:21:83:b4:f4:c4:8a:20:37:82:c5:bf:a6:45:
21:1c:1c:c7:b0:e3:ed:56:18:88:1b:2f:8d:59:12:90:26:81:
61:eb:e4:d3:2d:1f:e8:a6:01:e3:12:5c:96:84:7f:da:f7:b6:
0f:2d:53:20:39:30:94:2b:b1:88:98:8d:b7:f9:b7:71:b6:e0:
8f:55:19:d4:2d:dd:32:8c:0e:36:92:d0:89:65:39:e6:fb:63:
ec:23:47:cb:b5:8c:48:fd:22:43:6e:b3:4a:23:85:62:30:71:
16:18:03:7a:8b:8e:c8:12:ab:39:d0:4d:76:0b:4d:f3:10:5f:
50:a2:02:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:28:07 2025 by rpki-client